
The exposure
FRCS is the soft edge of the mission.
Facility-related control systems and installation utilities were connected long before they were defended. An adversary who cannot reach the network reaches for the power, water and fuel that the network needs.
RMF · NIST 800-82UFC 4-010-06CMMC
■FRCS boundaries and authorization packages
■Contractor and vendor access on installation networks
■Continuity of utilities under attack
Typical topologyExposed path
L3.5 · DMZEnclave boundary
VENDOR VPN
L2 · HMIUMCS front end
L2 · SCADAUtility SCADA
L2 · HISTORIANHistorian
L1 · PLCSwitchgear PLC
L1 · RTUFuel farm RTU
L1 · SAFETYSafety PLC
L0 · PROCESSPower · water · fuel · HVAC
Where we start
